Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/a9c0b7-a23a-458f-8f64-ba37511404c2/1/xZJ4bO1s5ZdYVGi7TzazHPas7G4.mft
File: xZJ4bO1s5ZdYVGi7TzazHPas7G4.mft (raw, json)
Hash identifier: JNJsXfjBGOkL6ldtzTeD+qwlhHhIWTnvaTPvtB3rgz4=
Subject key identifier: AD:D7:BA:8B:21:A0:59:28:EE:FE:13:4E:88:93:4E:66:8D:44:08:8D
Authority key identifier: C5:92:78:6C:ED:6C:E5:97:58:54:68:BB:4F:36:B3:1C:F6:AC:EC:6E
Certificate issuer: /CN=c592786ced6ce597585468bb4f36b31cf6acec6e
Certificate serial: 019CAA583E657BF344DC681829B85E829D3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xZJ4bO1s5ZdYVGi7TzazHPas7G4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/a9c0b7-a23a-458f-8f64-ba37511404c2/1/xZJ4bO1s5ZdYVGi7TzazHPas7G4.mft
Manifest number: 1857
Signing time: Sun 01 Mar 2026 17:00:35 +0000
Manifest this update: Sun 01 Mar 2026 17:00:35 +0000
Manifest next update: Mon 02 Mar 2026 17:00:35 +0000
Files and hashes: 1: 5nzdgTkkHsT4RLbgZ2GRcxsXvB4.roa (hash: qdwMngtFVt4ZyT/UodrlBdn1CZ1QUvtY6m9NXbdSStU=)
2: FCbP3k2rGutoC5ZIVI42Yy4D044.roa (hash: YEtesgH5hZKksi2t3ICvpYYP+6hkAxgaGRoHD54GMj4=)
3: wQTE-RQ3gReLtYxe4QY_Q7yg75Y.roa (hash: xzHJiZgBxtEtCYr9MbTY6G8tT0OCniElkcH6xF7+Cv8=)
4: xZJ4bO1s5ZdYVGi7TzazHPas7G4.crl (hash: RKl10w/JtAuWX80bhxEbpMhc/7QwJb+3exPgcmt+T7A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/a9c0b7-a23a-458f-8f64-ba37511404c2/1/xZJ4bO1s5ZdYVGi7TzazHPas7G4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/a9c0b7-a23a-458f-8f64-ba37511404c2/1/xZJ4bO1s5ZdYVGi7TzazHPas7G4.mft
rsync://rpki.ripe.net/repository/DEFAULT/xZJ4bO1s5ZdYVGi7TzazHPas7G4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:3e:65:7b:f3:44:dc:68:18:29:b8:5e:82:9d:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c592786ced6ce597585468bb4f36b31cf6acec6e
Validity
Not Before: Mar 1 17:00:35 2026 GMT
Not After : Mar 2 17:00:35 2026 GMT
Subject: CN=add7ba8b21a05928eefe134e88934e668d44088d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:fb:3a:43:09:7f:78:aa:28:bf:ef:7b:e0:9e:
97:7b:29:61:bf:58:4d:9c:cc:94:be:2c:fb:b3:05:
2d:31:22:9f:b1:74:df:a9:c8:c5:bb:7e:84:81:fb:
f1:24:1d:40:da:9c:77:39:f9:cf:63:ad:ce:e7:61:
39:2e:08:33:46:0d:71:39:a2:ba:55:08:d5:2a:47:
f3:23:65:5e:2b:ca:de:cd:4b:3f:d8:1b:77:09:db:
df:e9:75:3d:95:3d:93:b2:e0:60:46:31:89:ff:1b:
46:59:50:e4:65:cd:89:cc:c1:04:14:e8:0c:91:b9:
df:45:82:58:4f:ed:b7:76:6e:7c:71:ba:b2:be:39:
7f:16:9e:e6:e3:db:4b:c3:35:05:73:9b:1c:2a:84:
ed:9e:ed:15:5d:b1:43:b5:77:57:05:b3:ff:c2:b7:
8d:12:db:05:a0:7e:51:f8:e9:1f:3f:79:7b:f6:ab:
9e:2b:a9:25:78:df:aa:23:ec:3d:fb:89:f8:a7:b3:
80:75:67:4f:ea:bc:21:8d:64:ed:72:c5:ca:f9:ee:
b0:41:23:b0:5f:8b:41:14:65:c9:5e:9c:e6:9a:43:
e3:af:42:51:c4:27:45:53:b8:f5:52:82:c6:87:b2:
a4:53:99:5b:ef:8c:9a:a4:7d:99:ca:69:9a:74:56:
36:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:D7:BA:8B:21:A0:59:28:EE:FE:13:4E:88:93:4E:66:8D:44:08:8D
X509v3 Authority Key Identifier:
keyid:C5:92:78:6C:ED:6C:E5:97:58:54:68:BB:4F:36:B3:1C:F6:AC:EC:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xZJ4bO1s5ZdYVGi7TzazHPas7G4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/a9c0b7-a23a-458f-8f64-ba37511404c2/1/xZJ4bO1s5ZdYVGi7TzazHPas7G4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/a9c0b7-a23a-458f-8f64-ba37511404c2/1/xZJ4bO1s5ZdYVGi7TzazHPas7G4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:54:48:1f:a8:51:e0:9d:69:7a:77:03:74:10:c9:34:9e:39:
6b:ff:7a:5e:06:39:24:31:94:22:5f:a9:c4:b9:23:81:6f:6a:
9c:99:6f:e7:77:f5:88:a9:4b:f0:a2:f7:3f:35:6a:c8:02:ea:
1a:24:e5:4c:20:c3:51:23:5c:fd:d1:85:ca:0e:a4:6c:71:fd:
99:6d:63:d6:05:ca:86:30:aa:2c:9c:e9:b4:cc:86:67:16:09:
00:ff:c1:8a:d8:40:1f:22:63:c7:0b:7f:5b:e4:c6:13:f6:6c:
40:8a:a3:48:dd:f0:96:62:1d:17:59:e1:c6:b5:2d:4a:7d:c7:
b6:8a:09:6c:07:69:80:6d:33:b3:df:53:dc:e2:e0:42:71:2b:
b8:78:a1:2c:d9:6c:71:52:5c:19:ed:1c:c8:a4:e8:07:05:b6:
6b:16:bc:cd:66:72:a0:ed:36:76:fa:69:6a:f3:ca:95:0f:de:
b7:03:cf:a2:c4:aa:70:5f:bb:5e:60:a5:d9:90:1e:e5:b6:ea:
8e:fe:4f:96:c7:8d:53:99:9d:99:bb:5b:c7:66:bd:b8:3a:6b:
e7:30:eb:e9:23:37:87:b5:5f:a5:22:e8:bd:d4:97:2f:bb:d5:
33:dc:1f:f8:4c:05:98:f5:81:65:3a:0e:29:88:9d:1a:52:47:
bd:cf:f3:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:17:42 2026 by rpki-client